codeql
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database", "SAST scan", "taint analysis", "dataflow analysis", or "find vulnerabilities in this repo". Covers Python, JavaScript/TypeScript, Go, Java/Kotlin, C/C++, C#, Ruby, and Swift. Supports "run all" (security-and-quality + security-experimental) and "important only" (high-precision) scan modes, and creates data extension…
What is this resource?
Scans a codebase for security vulnerabilities using CodeQL's interprocedural data flow and taint tracking analysis. Triggers on "run codeql", "codeql scan", "build codeql database", "SAST scan", "taint analysis", "dataflow analysis", or "find vulnerabilities in this repo". Covers Python, JavaScript/TypeScript, Go, Java/Kotlin, C/C++, C#, Ruby, and Swift. Supports "run all" (security-and-quality + security-experimental) and "important only" (high-precision) scan modes, and creates data extension…
Review the original project for installation steps, licenses, compatibility and updates. This directory provides discovery links, not downloadable or verified code.
Installation
For repositories supported by the Skills CLI, you can typically start with:
npx skills add trailofbits/skillsCheck the repository instructions and select the intended skill before installing. This command may not apply to every source.
Safety & attribution
This is an external resource, not independently security-audited by this directory. Inspect permissions, scripts and changes before using it with your files or accounts.